EXPOSURES › CVE-2026-73749
CVE-2026-73749
CRITICAL
DETAIL
SourceNVD · cve
Published2026-09-01
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-73749 ↗
⚡ RCE
SHAME 85/100
rceunpatchedexploited-in-wild
An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input.
HPE AOS-CX daemons improperly process malformed input, allowing unauthenticated remote attackers to achieve remote code execution with elevated privileges. DIB organizations must patch this critical vulnerability immediately to prevent supply-chain compromise and unauthorized network access. The failure is avoidable through rigorous input validation and timely patching.
Shame score — A critical RCE vulnerability in a network infrastructure daemon allows unauthenticated remote attackers to execute arbitrary code with elevated privileges, representing a severe avoidable failure in input validation and patch management.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
hpe · vendoraruba cx 10000-48y6c \(r8p13a\) · productaruba cx 10000-48y6c \(r8p14a\) · productaruba cx 10000-48y6c \(s0f98a\) · productaruba cx 10040 32p \(s4r54a\) · productaruba cx 10040 32p \(s4r55a\) · productaruba cx 10040 32p \(s4r56a\) · productaruba cx 10040 \(s4r58a\) · productaruba cx 4100i 12-port \(jl817a\) · productaruba cx 4100i 24-port \(jl818a\) · productaruba cx 6000 12g \(r8n89a\) · productaruba cx 6000 12p \(r8n89b\) · productaruba cx 6000 12p \(s4r21a\) · productaruba cx 6000 24g \(r8n87a\) · productaruba cx 6000 24g \(r8n88a\) · productaruba cx 6000 24p \(r8n87b\) · productaruba cx 6000 24p \(r8n88b\) · productaruba cx 6000 24p \(s4r26a\) · productaruba cx 6000 24p \(s4r27a\) · productaruba cx 6000 48g \(r8n85a\) · productaruba cx 6000 48g \(r8n86a\) · productaruba cx 6000 48g \(r9y03a\) · productaruba cx 6000 48p \(r8n85b\) · productaruba cx 6000 48p \(r8n86b\) · productaruba cx 6000 48p \(r9y03b\) · productaruba cx 6000 48p \(s4r20a\) · productaruba cx 6000 48p \(s4r24a\) · productaruba cx 6000 48p \(s4r25a\) · productaruba cx 6000 8p \(s4r22a\) · productaruba cx 6000 8p \(s4r23a\) · productaruba cx 6000 8p \(s4r28a\) · productaruba cx 6000 8p \(s4r29a\) · productaruba cx 6100 12g \(jl679a\) · productaruba cx 6100 24g \(jl677a\) · productaruba cx 6100 24g \(jl678a\) · productaruba cx 6100 48g \(jl675a\) · productaruba cx 6100 48g \(jl676a\) · productaruba cx 6100 48g \(r9y04a\) · productaruba cx 6200f 12g \(r8q72a\) · productaruba cx 6200f 12g \(r8v13a\) · productaruba cx 6200f 24g \(jl724b\) · productaruba cx 6200f 24g \(jl725b\) · productaruba cx 6200f 24g \(s0g13a\) · productaruba cx 6200f 24g \(s0g14a\) · productaruba cx 6200f 24g \(s0m81a\) · productaruba cx 6200f 24g \(s0m82a\) · productaruba cx 6200f 24g \(s0m86a\) · productaruba cx 6200f 24g \(s0m87a\) · productaruba cx 6200f 48g \(jl726b\) · productaruba cx 6200f 48g \(jl727b\) · productaruba cx 6200f 48g \(jl728b\) · productaruba cx 6200f 48g \(s0g15a\) · productaruba cx 6200f 48g \(s0g16a\) · productaruba cx 6200f 48g \(s0g17a\) · productaruba cx 6200f 48g \(s0m83a\) · productaruba cx 6200f 48g \(s0m84a\) · productaruba cx 6200f 48g \(s0m85a\) · productaruba cx 6200f 48g \(s0m88a\) · productaruba cx 6200f 48g \(s0m89a\) · productaruba cx 6200f 48g \(s0m90a\) · productaruba cx 6200m 24g \(r8q67a\) · productaruba cx 6200m 24g \(r8q68a\) · productaruba cx 6200m 24g \(r8v08a\) · productaruba cx 6200m 24g \(r8v09a\) · productaruba cx 6200m 36g \(r8q71a\) · productaruba cx 6200m 36g \(r8v12a\) · productaruba cx 6200m 48g \(r8q69a\) · productaruba cx 6200m 48g \(r8q70a\) · productaruba cx 6200m 48g \(r8v10a\) · productaruba cx 6200m 48g \(r8v11a\) · productaruba cx 6300f 24 \(jl666a\) · productaruba cx 6300f 24 \(jl668a\) · productaruba cx 6300f 24p \(s0g96a\) · productaruba cx 6300f 24p \(s0g98a\) · productaruba cx 6300f 48 \(jl665a\) · productaruba cx 6300f 48 \(jl667a\) · productaruba cx 6300f 48p \(s0g95a\) · productaruba cx 6300f 48p \(s0g97a\) · productaruba cx 6300m 16p \(s4p41a\) · productaruba cx 6300m 16p \(s4p45a\) · productaruba cx 6300m 24 \(jl658a\) · productaruba cx 6300m 24 \(jl660a\) · productaruba cx 6300m 24 \(jl662a\) · productaruba cx 6300m 24 \(jl664a\) · productaruba cx 6300m 24p \(r8s89a\) · productaruba cx 6300m 24p \(r8s92a\) · productaruba cx 6300m 24p \(s0f99a\) · productaruba cx 6300m 24p \(s0g01a\) · productaruba cx 6300m 24p \(s0g03a\) · productaruba cx 6300m 24p \(s0g05a\) · productaruba cx 6300m 24p \(s4p44a\) · productaruba cx 6300m 24p \(s4p48a\) · productaruba cx 6300m 24p \(s5z46a\) · productaruba cx 6300m 32p \(s4p42a\) · productaruba cx 6300m 32p \(s4p46a\) · productaruba cx 6300m 48 \(jl659a\) · productaruba cx 6300m 48 \(jl661a\) · productaruba cx 6300m 48 \(jl663a\) · productaruba cx 6300m 48 \(jl762a\) · productaruba cx 6300m 48p \(r8s90a\) · productaruba cx 6300m 48p \(s0g00a\) · productaruba cx 6300m 48p \(s0g02a\) · productaruba cx 6300m 48p \(s0g04a\) · productaruba cx 6300m 48p \(s0g06a\) · productaruba cx 6300m 48p \(s0x44a\) · productaruba cx 6300m 48p \(s4p43a\) · productaruba cx 6300m 48p \(s4p47a\) · productaruba cx 6300m 48sr5 \(r8s91a\) · productaruba cx 6405 48sfp\+8sfp56 \(r0x30a\) · productaruba cx 6405 96g \(r0x29a\) · productaruba cx 6405 \(r0x26a\) · productaruba cx 6405 v2 \(r0x26c\) · productaruba cx 6410 96g \(jl741a\) · productaruba cx 6410 \(r0x27a\) · productaruba cx 6410 v2 \(r0x27c\) · productaruba cx 8320 32 \(jl579a\) · productaruba cx 8320 48 \(jl479a\) · productaruba cx 8320 48 \(jl581a\) · productaruba cx 8325-32c \(jl626a\) · productaruba cx 8325-32c \(jl627a\) · productaruba cx 8325-48y8c \(jl624a\) · productaruba cx 8325-48y8c \(jl625a\) · productaruba cx 8325-48y8c \(jl858a\) · productaruba cx 8325h-16c \(s4b22a\) · productaruba cx 8325h-16c \(s4b24a\) · productaruba cx 8325h-18y4c \(s4b21a\) · productaruba cx 8325h-18y4c \(s4b23a\) · productaruba cx 8325p-32c \(s0g07a\) · productaruba cx 8325p-32c \(s0g08a\) · productaruba cx 8360-12c \(jl708c\) · productaruba cx 8360-12c \(jl709c\) · productaruba cx 8360-16y2c \(jl702c\) · productaruba cx 8360-16y2c \(jl703c\) · productaruba cx 8360-24xf2c \(jl710c\) · productaruba cx 8360-24xf2c \(jl711c\) · productaruba cx 8360-32y4c \(jl700c\) · productaruba cx 8360-32y4c \(jl701c\) · productaruba cx 8360-48xt4c \(jl706c\) · productaruba cx 8360-48xt4c \(jl707c\) · productaruba cx 8360-48y6c \(jl704c\) · productaruba cx 8360-48y6c \(jl705c\) · productaruba cx 8400 8-slot chassis \(jl375a\) · productaruba cx 8400 \(jl376a\) · productaruba cx 9300 32d \(r8z96a\) · productaruba cx 9300 32d \(r9a29a\) · productaruba cx 9300 32d \(r9a30a\) · productaruba cx 9300 \(r8z97a\) · productaruba cx 9300 \(r8z98a\) · productaruba cx 9300 \(r8z99a\) · productaruba cx 9300 \(r9a00a\) · productaruba cx 9300s 32p \(s0f81a\) · productaruba cx 9300s 32p \(s0f82a\) · productaruba cx 9300s 32p \(s0f83a\) · productaruba cx 9300s 32p \(s0f84a\) · productaruba cx 9300s 32p \(s0f87a\) · productaruba cx 9300s 32p \(s0f88a\) · productarubaos-cx · product
DESCRIPTION
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.